Live data from Hacker News

Companies must stop using Google Analytics

imy.se

311–320 of 672 posts

Re: Companies must stop using Google Analytics

#311
post #198

Earlier quoted context omitted.

Wow, job for people who only knew google analytics exist? I thought at minimum SQL is required, and today's analysts also need to know python/pandas at minimum. Imagine being a 'frontend developer' who can only use squarespace.

IDK, I used to worked with "Drupal consultants" who barely knew PHP. They delivered the sites they were asked to, usually on time and within budget.

And they could migrate to WordPress if all theirs customers had to migrate.

Re: Companies must stop using Google Analytics

#312
post #45

Who needs analytics? I'm confused. When I worked at companies using google analytics, 99.9% of the time they could have gotten this data from server logs with something like awstats or goaccess. To this day, I still don't get what's the point of embedding some javascript to do extra-requests or a tracking pixel, when the data was already given once.

Back in the day before responsive design, I loved having stats on things like screen resolution you couldn’t otherwise get from server logs. You also get stats on keywords driving traffic to individual pages.

Re: Companies must stop using Google Analytics

#313

Earlier quoted context omitted.

> I work with call centers (Connect), Athena (Apache Presto), Step functions, and I have done some IOT work and of course Lambda and a lot more. Well, Lambda has a multitude of competitors (although to my knowledge they are only competing on the principle of serverless computing, so you'll still have to re-write scripts using these), and same for IoT integration. The rest I'd say is pretty exotic stuff... and thanks…

It was originally the call center software that Amazon Retail used. It was ported to become an AWS service. For text to speech it uses Lex - the AWS version of Alexa. For other integrations you have it call a Lambda. It’s the standard type of software you use when calling into a call center with a mixture of automated help and operators. Like I said above, if you know your specialty well, it’s not hard to map your ex…

> I’m more challenging the notion that all any of the cloud providers offer is a bunch of VMs and the surrounding networking infrastructure.

Granted, I'm biased because I work at a development-focused shop so my experience is the development/infra side of AWS and Azure as well as a healthy load of legacy on-prem servers (I leave my fingers off of GCP though, heard too many horror stories). We follow KISS - so just from a quick grep through our Terraform files it's almost all EC2, S3, Cloudfront, ELB, ACM, RDS, EFS, Beanstalk, ECS and EKS plus Cloudwatch for logging/monitoring, well wrapped in modules. That's stuff one can find pretty much everywhere, especially as most of our workloads are shifting to EKS.

The things you use are IMHO more targeted for specialist use cases, and I can clearly see the value-add... I'd pay good money to never have to see JIRA again in my life.

Re: Companies must stop using Google Analytics

#314

Earlier quoted context omitted.

But there are infinite numbers of salts. Please explain how this could be brute-forced as long as the salt is used correctly? What am I missing?

The salt is stored in plaintext alongside the hash and simply concatenated. If your scheme, for example, is h := H(ip, salt) := sha256(ip :: salt), bruteforcing is simply a matter of trying all values of ip: for i in 0..

The salt doesn't have to be plain-text, that's an implementation detail in the common password hashing algorithms for obvious reasons. The requirement was that the hash should be non-reversible. Store the salt in a (http-only) session cookie and concatenate it to the IP before the hashing rounds. Put your entropy in the salt and any brute-force attempt is theoretical. For every session you need to compute the exact combination of IP + salt (which isn't even known to the server).

Re: Companies must stop using Google Analytics

#315

Earlier quoted context omitted.

This level of dependence on certain tools is neither rare nor unprecedented. Your run-of-the-mill business drone will be trained on Word/Excel/Outlook and be hard to impossible to retrain on anything else (either because of actual stupidity or resistance to change). This already starts at school where "Informatik" is often just learning where to click in Microsoft products. Similarly, tradespeople often specialize in…

'actual stupidity'... gotta love the general disdain of the 'run of the mill business drone'... It's funny my wife is a run of the mill business drone. She thinks IT is a bunch of assholes. I would say she is probably right. Way to keep things going.

lol

Seriously, some looking down the nose comments

Re: Companies must stop using Google Analytics

#316
post #92

One could still use Google Analytics by proxying the tracking events. Afaik only the IP is considered private data. So one could mask or (non-reversibly) hash the IP, remove anything else which might be considered private data and then send the event to Google. A simple PHP script with a few lines of code could do that. But Google lost me by: A) Making it impossible to convert your old data into the new Analytics ver…

You can’t hash an ipv4 address. It’s trivial to brute force all possibilities given the limited problem space.

How about this:

Server-wide salt. Randomly generated every 24h or server reboot (whichever is sooner).

The salt is not saved alongside the hashed IP, it is not saved anywhere whatsoever. There is no log of previous salts.

You can still track a user session across multiple page calls, but the hash can not track them across different sites.

Re: Companies must stop using Google Analytics

#317
post #299

Just another thing that's going to leave the EU in the stone age, falling further and further behind the USA economically. 15 years ago, US and EU GDP per capita were about the same. Now the USA is 50% higher. Even West Virginia is richer per person than France.

If that "stone age" means I'm less likely tracked and logged by a US megacorp to whom I never inteded to share information like what buying and what my medical problems are, GOOD. I hope all Alphabet IP ranges get blackholed on the ISP level if they continue to perpetuate this hellscape we call targeted advertising.

Kneecapping tech for amorphous "privacy" concerns is very much a valid choice. I'd bet on the countries that don't make that trade off.

Re: Companies must stop using Google Analytics

#318

Earlier quoted context omitted.

'actual stupidity'... gotta love the general disdain of the 'run of the mill business drone'... It's funny my wife is a run of the mill business drone. She thinks IT is a bunch of assholes. I would say she is probably right. Way to keep things going.

and IT "assholes" think the run of the mill business drones are "assholes" as well. Their inability to be effective at their jobs tend to make IT lives worse because they can't understand what IT workers do but IT workers can understand what the basic run of the mill business drones do...and their work tends to be a bunch of pointless meetings. Yeah, I work at a corporate office and have made it a mission to see what…

> and IT "assholes" think the run of the mill business drones are "assholes" as well. Their inability to be effective at their jobs tend to make IT lives worse because they can't understand what IT workers

Have you ever dealt with an average IT department in a non-tech company? This attitude doesn't help anyone and I really want to believe that only a small minority of tech people think of any other worker anywhere as an "asshole".

Re: Companies must stop using Google Analytics

#319

Earlier quoted context omitted.

and IT "assholes" think the run of the mill business drones are "assholes" as well. Their inability to be effective at their jobs tend to make IT lives worse because they can't understand what IT workers do but IT workers can understand what the basic run of the mill business drones do...and their work tends to be a bunch of pointless meetings. Yeah, I work at a corporate office and have made it a mission to see what…

[flagged]

Sadly, citing off topic ChatGTP woes and reducing Americans to a broad generalization is not a sign of intelligence either.

Re: Companies must stop using Google Analytics

#320
post #28

Analytics right now is basically "you won't get any useful information for your website because we value users' privacy, don't worry we see all of the data anyway" Remember, you aren't the customer if you embed Google Analytics, Google is. edit: if you want analytics, honestly just roll your own... you can't trust advertising companies with your users' data

This is true not just for analytics but pretty much all features. Imagine you are a great speaker and instructor and have an audience. Right now you GIFT it to YouTube, Twitter, etc. and they monetize it for you, give you a tiny percentage, and even constantly direct your audience to competitors and other distractions. In fact YouTube even sells an option to advertise your videos on your competitor’s videos! I say —…

> they monetize it for you, give you a tiny percentage

It’s actually about 55% for YouTube. Creators are in demand and it’s competitive to keep them.

Post reply on HN